This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/34995f-8a45-45fb-81f2-2001779926cf/1/MenbQitjczJSiuYo2dpQ5AOX-2Q.mft File: MenbQitjczJSiuYo2dpQ5AOX-2Q.mft (raw, json) Hash identifier: e982evg1f3ycKnfBrXbgHkZp8ahblsKDU/BlWQPncWA= Subject key identifier: A4:72:8B:4C:34:ED:DB:03:06:96:BE:87:31:F0:84:9D:79:38:8C:C9 Authority key identifier: 31:E9:DB:42:2B:63:73:32:52:8A:E6:28:D9:DA:50:E4:03:97:FB:64 Certificate issuer: /CN=31e9db422b637332528ae628d9da50e40397fb64 Certificate serial: 019C438FBC3BF19D879B4F743EA909BC5DC0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MenbQitjczJSiuYo2dpQ5AOX-2Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/34995f-8a45-45fb-81f2-2001779926cf/1/MenbQitjczJSiuYo2dpQ5AOX-2Q.mft Manifest number: 041E Signing time: Mon 09 Feb 2026 18:00:19 +0000 Manifest this update: Mon 09 Feb 2026 18:00:19 +0000 Manifest next update: Tue 10 Feb 2026 18:00:19 +0000 Files and hashes: 1: MenbQitjczJSiuYo2dpQ5AOX-2Q.crl (hash: L+wznSTpi73rZq7bkiupCpuSVdNg+1JWzq6HBcHOx/U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/34995f-8a45-45fb-81f2-2001779926cf/1/MenbQitjczJSiuYo2dpQ5AOX-2Q.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/34995f-8a45-45fb-81f2-2001779926cf/1/MenbQitjczJSiuYo2dpQ5AOX-2Q.mft rsync://rpki.ripe.net/repository/DEFAULT/MenbQitjczJSiuYo2dpQ5AOX-2Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 18:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:8f:bc:3b:f1:9d:87:9b:4f:74:3e:a9:09:bc:5d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31e9db422b637332528ae628d9da50e40397fb64 Validity Not Before: Feb 9 18:00:19 2026 GMT Not After : Feb 10 18:00:19 2026 GMT Subject: CN=a4728b4c34eddb030696be8731f0849d79388cc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:71:3c:0a:f6:45:b7:76:2b:3d:9c:d6:42:b2: a6:50:4c:b0:46:7a:84:83:9f:9d:85:c7:7e:75:09: 86:0d:0d:eb:c5:1f:c9:db:ff:2e:84:a6:96:c8:04: 2d:6a:78:79:f8:e2:75:a2:4c:dd:ee:49:a7:06:61: 13:53:40:ed:28:07:56:9f:58:bc:a9:f0:be:e4:60: 15:32:0d:f3:f0:9a:e9:43:80:66:83:f4:9e:0e:7b: 55:0c:c6:66:a6:ac:3a:36:c9:e5:a0:e7:be:44:82: 2b:cd:c7:cb:5d:0d:d2:40:f3:d5:0f:97:cb:38:85: 67:c9:34:58:fd:a2:75:24:0f:b6:1c:78:14:b6:e8: 48:54:34:7d:9c:a9:60:77:03:61:d9:56:8b:53:44: 03:40:0d:ed:b8:99:58:20:2b:32:91:41:8c:b3:68: eb:82:02:05:6a:02:70:3d:d3:86:17:58:56:9d:06: dc:07:bb:70:cc:75:5e:31:d6:30:a3:3f:0e:54:67: 0e:05:3c:02:d6:e2:a5:e0:54:58:44:34:5c:a2:ea: 0c:13:5b:23:63:51:7f:e6:51:30:91:3c:ec:95:9d: 67:a5:03:f9:8f:ed:c1:11:bd:30:74:ee:ad:57:5e: 51:1e:57:f1:64:a5:68:28:f6:32:b5:6a:35:ab:09: e9:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:72:8B:4C:34:ED:DB:03:06:96:BE:87:31:F0:84:9D:79:38:8C:C9 X509v3 Authority Key Identifier: keyid:31:E9:DB:42:2B:63:73:32:52:8A:E6:28:D9:DA:50:E4:03:97:FB:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MenbQitjczJSiuYo2dpQ5AOX-2Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/34995f-8a45-45fb-81f2-2001779926cf/1/MenbQitjczJSiuYo2dpQ5AOX-2Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/34995f-8a45-45fb-81f2-2001779926cf/1/MenbQitjczJSiuYo2dpQ5AOX-2Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:54:b6:0f:9f:35:1e:51:06:0f:b3:43:e9:a2:90:73:b8:0e: 39:be:e1:51:fe:8c:d8:f4:ee:5b:fc:09:2c:f1:40:02:f9:5d: 46:1c:28:3a:4b:6a:61:3a:fe:fd:c5:d0:39:f0:d1:05:eb:0c: 7b:7c:cb:69:72:5f:14:79:cc:e1:03:ab:0a:77:f4:f1:48:4c: 9d:6d:71:50:5c:5a:04:f9:31:71:7e:fc:5f:fe:c5:dc:56:f0: ec:34:bc:29:6d:96:a4:f1:67:04:64:1c:9b:fc:85:f3:17:a3: 5c:5e:e8:62:d5:8e:fc:27:9f:7b:ce:3d:34:a3:45:f8:23:62: 9f:6f:69:86:fb:bb:25:28:f8:b4:81:a3:53:26:eb:b4:a7:35: 92:75:08:98:f0:01:d6:9a:e5:cb:18:62:2c:b5:e5:8d:1f:13: 03:52:21:7a:f2:1f:80:5d:34:92:c8:d6:37:f6:9b:6f:11:49: a3:b3:0c:18:77:8d:1b:b9:e7:7e:ce:5f:c4:d5:2b:29:f1:79: c2:01:5c:56:cb:b5:e9:3e:ae:27:09:20:57:81:61:14:58:93: 9d:83:87:22:19:5c:58:26:81:12:91:35:e5:99:f8:59:a0:c2: bb:8b:c1:3c:1a:86:82:ca:c0:f6:06:28:ba:fc:d3:db:f7:5b: 1b:b6:6a:ad -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDj7w78Z2Hm090PqkJvF3AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxZTlkYjQyMmI2MzczMzI1MjhhZTYyOGQ5ZGE1MGU0MDM5 N2ZiNjQwHhcNMjYwMjA5MTgwMDE5WhcNMjYwMjEwMTgwMDE5WjAzMTEwLwYDVQQD EyhhNDcyOGI0YzM0ZWRkYjAzMDY5NmJlODczMWYwODQ5ZDc5Mzg4Y2M5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1HE8CvZFt3YrPZzWQrKmUEywRnqE g5+dhcd+dQmGDQ3rxR/J2/8uhKaWyAQtanh5+OJ1okzd7kmnBmETU0DtKAdWn1i8 qfC+5GAVMg3z8JrpQ4Bmg/SeDntVDMZmpqw6NsnloOe+RIIrzcfLXQ3SQPPVD5fL OIVnyTRY/aJ1JA+2HHgUtuhIVDR9nKlgdwNh2VaLU0QDQA3tuJlYICsykUGMs2jr ggIFagJwPdOGF1hWnQbcB7twzHVeMdYwoz8OVGcOBTwC1uKl4FRYRDRcouoME1sj Y1F/5lEwkTzslZ1npQP5j+3BEb0wdO6tV15RHlfxZKVoKPYytWo1qwnpGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKRyi0w07dsDBpa+hzHwhJ15OIzJMB8GA1UdIwQY MBaAFDHp20IrY3MyUormKNnaUOQDl/tkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTWVuYlFpdGpjekpTaXVZbzJkcFE1QU9YLTJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS8zNDk5NWYtOGE0NS00NWZiLTgxZjIt MjAwMTc3OTkyNmNmLzEvTWVuYlFpdGpjekpTaXVZbzJkcFE1QU9YLTJRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS8zNDk5NWYtOGE0NS00NWZiLTgxZjItMjAwMTc3OTkyNmNm LzEvTWVuYlFpdGpjekpTaXVZbzJkcFE1QU9YLTJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgFS2D581 HlEGD7ND6aKQc7gOOb7hUf6M2PTuW/wJLPFAAvldRhwoOktqYTr+/cXQOfDRBesM e3zLaXJfFHnM4QOrCnf08UhMnW1xUFxaBPkxcX78X/7F3Fbw7DS8KW2WpPFnBGQc m/yF8xejXF7oYtWO/Cefe849NKNF+CNin29phvu7JSj4tIGjUybrtKc1knUImPAB 1prlyxhiLLXljR8TA1IhevIfgF00ksjWN/abbxFJo7MMGHeNG7nnfs5fxNUrKfF5 wgFcVsu16T6uJwkgV4FhFFiTnYOHIhlcWCaBEpE15Zn4WaDCu4vBPBqGgsrA9gYo uvzT2/dbG7ZqrQ== -----END CERTIFICATE-----Generated at Tue Feb 10 01:41:42 2026 by rpki-client